Analysis
-
max time kernel
129s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
31-03-2022 15:33
Behavioral task
behavioral1
Sample
596-176-0x0000000000400000-0x0000000000A0C000-memory.exe
Resource
win7-20220311-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
596-176-0x0000000000400000-0x0000000000A0C000-memory.exe
Resource
win10v2004-en-20220113
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
596-176-0x0000000000400000-0x0000000000A0C000-memory.exe
-
Size
6.0MB
-
MD5
ab817353f4af360b081d32822f33c0c0
-
SHA1
9fcea77585339439f6fb30e652afbb91d5f2211e
-
SHA256
89a7db602378533de827e0291825f311d8a6f07c5409e83f5d163b0e881ab0b8
-
SHA512
b6a7564cf68d54da4e960bbfb30dc868adc40cfdfed5e5eb32b1e3032e908a8e07b4b7e84a78bc9800dfee0b80a7d225431fa8987a71158d3f0cda987ecb0082
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2136 1376 WerFault.exe 596-176-0x0000000000400000-0x0000000000A0C000-memory.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\596-176-0x0000000000400000-0x0000000000A0C000-memory.exe"C:\Users\Admin\AppData\Local\Temp\596-176-0x0000000000400000-0x0000000000A0C000-memory.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1376 -s 1922⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1376 -ip 13761⤵